United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 

Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. ! 


FILING DATE 


FIRST NAMED INVENTOR 


ATTORNEY DOCKET NO. 


CONFIRMATION NO. 


10/632,356 


08/01/2003 


Pavel Kouznetsov 


MSFT-2 185/302760.2 


3970 



41505 7590 11/05/2007 

WOODCOCK WASHBURN LLP (MICROSOFT CORPORATION) 
CIRA CENTRE, 12TH FLOOR 
2929 ARCH STREET 
PHILADELPHIA, PA 19104-2891 



EXAMINER 



NALVEN, ANDREW L 



ART UNIT 



PAPER NUMBER 



2134 



MAIL DATE 



DELIVERY MODE 



11/05/2007 PAPER 

Please find below and/or attached an Office communication concerning this application or proceeding. 

The time period for reply, if any, is set in the attached communication. 



PTOL-90A (Rev. 04/07) 



Office Action Summary 


Application No. 

10/632,356 


Applicant(s) 

KOUZNETSOV ET AL. 


Pvaminar 

Andrew L. Nalven 


Art Unit 

2134 





-r The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 
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DETAILED ACTION 

1 . Claims 1-24 are pending. 

Response to Arguments 

2. Applicant's arguments filed 9/14/2007 have been fully considered but are moot in 
view of the new grounds of rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-2, 6-14, and 18-24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kobata et al US PGPub 2002/0077985 in view of Stefik et al US 
Patent No. 6,714,921 and Shutt US PGPub 2003/0217034.. 

4. With regards to claims 1 and 13, Kobata teaches receiving the document into the 
folder (Kobata, paragraphs 0092, 0225-0226), receiving a request for the copy of the 
document (Kobata, paragraphs 0091-0092), defining rights data for the copy of the 
document (Kobata, paragraph 0090), publishing the copy of the document and the 
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defined rights data thereof to result in a package with the rights data and the copy of the 
document encrypted according to a content key (KD) to result in a KD(copy) (Kobata, 
paragraphs 0092, 0097, 0099, 0225), and delivering the formed package to the 
requester (Kobata, paragraph 0096) whereby the rights data can be discovered upon 
the requester attempting to render the package and such discovery triggers a request 
for a corresponding license based on such rights data (Kobata, paragraph 0100), the 
license including KD therein in a form available to the requester to decrypt KD(copy) if 
the requester satisfies the rights data (Kobata, paragraph 0100). Kobata fails to teach 
defining rights data based on rights information of the folder. However, Stefik teaches 
defining rights data based on rights information of the folder (Stefik, column 10 line 64 - 
column 1 1 line 9). Further, Shutt teaches the dynamic definition of rights for a document 
added to the folder (Shutt, paragraph 0100, single document security profile assigned to 
documents added to the folder). At the time the invention was made, it would have 
been obvious to a person of ordinary skill in the art to utilize Stefik's and Shutt's folder 
rights method with Kobata's document protection system because it offers the 
advantage of providing a method of restricting usage to several files by providing usage 
restrictions to a single folder (Stefik, column 10 line 64 - column 1 1 line 9) and ensuring 
that all new documents are assigned with security rights data thus preventing a party 
from accessing data not assigned to them (Shutt, paragraph 0100, paragraph 0009). 
5. With regards to claims 2 and 14, Kobata as modified teaches obtaining the 
license on behalf of the requester and delivering the obtained license to the requester 
with the package (Kobata, paragraph 0096). 
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6. With regards to claims 6, 8, 18, and 20, Kobata teaches the folder has access 
controls being defined for each individual and/or for each group of individuals that may 
access the folder, and wherein defining the rights data comprises mapping the access 
controls for the folder into the rights data for the copy of the document (Stefik, column 

1 0 line 64 - column 1 1 line 9). 

7. With regards to claims 7, 9, 19, and 21 , Kobata teaches mapping the access 
controls for the folder into the rights data for the requester and also for all other 
individuals or groups of individuals specified in the access controls (Stefik, column 10 
line 64 - column 1 1 line 9), whereby the copy of the document with the rights data 
attached thereto can be distributed and redistributed to such other individuals and each 
such other individual can employ the rights data to obtain a license to render the 
document (Kobata, paragraph 0103). 

8. With regards to claims 10 and 22-23, Kobata teaches copying substantially all of 
the rights template into the rights data for the copy of the document (Stefik, column 10 
line 64 - column 1 1 line 9). 

9. With regards to claims 12 and 24, Kobata teaches receiving the document into 
the folder in a non-RM protected form whereby RM protection is applied to the copy of 
the document when the copy of the document is delivered to the requester (Kobata, 
paragraphs 0153-0154, Figure 9 Items 915). 

10. Claims 3-5 and 15-17 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kobata et al US PGPub 2002/0077985, Shutt US PGPub 2003/0217034 and Stefik 
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et al US Patent No. 6,714,921 , as applied to claim 1 above, and in further view of Xiao 
US Patent No. 6,571,337. 

1 1 . With regards to claims 3 and 15, Kobata as modified teaches generating the 
content key (KD) (Kobata, paragraphs 0092, 0097, 0099, 0225), encrypting the copy of 
the document with KD to form KD(copy) (Kobata, paragraphs 0092, 0097, 0099, 0225), 
but fails to teach protecting KD(copy) to a rights management server by encrypting KD 
with a public key of the RM server to result in RM(KD), whereby only the RM server with 
a corresponding private key can apply the same to reveal KD. However, Xiao teaches 
protecting KD(copy) to a rights management server by encrypting KD with a public key 
of the RM server to result in RM(KD) (Xiao, column 4 lines 50-67), whereby only the RM 
server with a corresponding private key can apply the same to reveal KD (Xiao, column 
4 lines 50-67, only clearance center can decrypt). At the time the invention was made, 
it would have been obvious to a person of ordinary skill in the art to utilize Xiao's 
method of encrypting content keys because it offers the advantage of preventing 
unauthorized access to the content key and the data itself (Xiao, column 4 lines 57-67). 

12. With regards to claims 4 and 16, Kobata as modified teaches the defined rights 
data signed by one of the RM server or the document store (Xiao, column 4 line 63 - 
column 5 line 6). 

13. With regards to claims 5 and 17, Kobata as modified teaches concatenating the 
rights data with PU-RM(KD) therein to KD(copy) to form the package (Xiao, column 5 
lines 45-57, column 1 line 62 - column 2 line 28). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Andrew L. Nalven whose telephone number is 571 272 
3839. The examiner can normally be reached on Monday - Thursday 8-6, Alternate 
Fridays. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571 272 381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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